Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.fasterxml.jackson/jackson-databind@2.0.0
purl pkg:maven/com.fasterxml.jackson/jackson-databind@2.0.0
Next non-vulnerable version 2.9.10.8
Latest non-vulnerable version 2.9.10.8
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ukwd-7rkh-sfhj
Aliases:
CVE-2020-35728
GHSA-5r5r-6hpj-8gg9
Deserialization of Untrusted Data FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
2.9.10.8
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:49:08.621770+00:00 GitLab Importer Affected by VCID-ukwd-7rkh-sfhj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.fasterxml.jackson/jackson-databind/CVE-2020-35728.yml 38.0.0